Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/N5iyTAEpv93HsxrTmem4hLdY3ww.roa
File: N5iyTAEpv93HsxrTmem4hLdY3ww.roa (raw, json)
Hash identifier: TCSknb2zb5gnp3tc4p1BhXY4e/UAF4G5Usp9zTKGTJY=
Subject key identifier: 37:98:B2:4C:01:29:BF:DD:C7:B3:1A:D3:99:E9:B8:84:B7:58:DF:0C
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 019623999DBE7E2BA5144F9DC7A4CF75FF3D
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/N5iyTAEpv93HsxrTmem4hLdY3ww.roa
Signing time: Fri 11 Apr 2025 06:46:31 +0000
ROA not before: Fri 11 Apr 2025 06:46:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.38.26.0/24 maxlen: 24
185.38.27.0/24 maxlen: 24
194.31.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:99:9d:be:7e:2b:a5:14:4f:9d:c7:a4:cf:75:ff:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Apr 11 06:46:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3798b24c0129bfddc7b31ad399e9b884b758df0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:76:e7:d5:26:a1:3b:b6:c4:0b:aa:4d:3e:
2a:32:c0:5d:c1:80:e5:fb:20:87:75:da:5d:7f:81:
00:bb:81:a4:44:4a:34:00:0c:77:36:4a:bb:26:3a:
40:5d:3f:c5:4d:38:ab:84:a7:6d:50:e4:ce:fc:e5:
64:eb:4a:b2:0a:3a:14:db:41:4d:94:ec:54:34:87:
c9:a6:a8:38:e4:bb:45:b8:84:7f:94:53:f0:7d:6a:
c6:d1:9e:b3:c6:3c:09:23:29:b4:eb:3e:0b:bc:9a:
2f:00:fa:3c:1a:e9:7e:dd:89:52:fb:a5:06:1a:59:
9e:ed:ae:0e:bc:9e:e7:c0:ea:c2:f0:64:76:9a:93:
91:59:0f:1f:6e:30:7a:8c:d3:47:8c:cd:7d:cd:fe:
e9:4e:58:33:65:b2:19:bc:e9:3b:74:70:92:64:3f:
6f:8a:46:d6:c1:3a:70:fe:5a:0f:3e:77:20:2d:ec:
dd:48:9a:cd:cf:32:54:a7:b1:18:4b:70:75:22:4d:
b7:ea:af:7f:c4:29:c2:fc:af:96:32:ad:01:84:fd:
4b:b8:0f:97:f4:26:a2:d0:93:39:be:a8:86:96:e5:
2e:97:44:48:66:56:50:b8:1c:67:fd:d9:e8:5e:7b:
84:39:49:dc:4a:af:fa:e5:a2:76:9d:25:03:da:63:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:B2:4C:01:29:BF:DD:C7:B3:1A:D3:99:E9:B8:84:B7:58:DF:0C
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/N5iyTAEpv93HsxrTmem4hLdY3ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.26.0/23
194.31.167.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2f:3d:75:66:b7:fd:4f:ac:a5:df:ad:50:c3:ec:fd:dc:06:
15:2d:3b:27:f8:fa:b0:4c:92:18:b7:a1:7a:89:05:30:6c:a0:
cd:7f:cc:a3:1c:14:64:93:92:16:6b:6c:d4:54:24:c5:9f:9b:
1e:1f:9a:8b:85:13:a5:bb:33:20:48:7e:9f:a4:f7:92:e3:d9:
ff:e0:d2:d8:ef:a0:3f:94:f8:4d:c7:a7:ca:38:a2:0e:fd:5d:
98:71:6a:68:62:97:96:ba:17:ae:e4:63:89:2d:e3:c1:d4:c3:
8b:0b:6a:72:1d:9f:66:a5:58:34:e2:cb:13:27:10:ce:6c:d0:
4c:57:9b:7d:10:5f:48:88:dc:ff:64:41:5e:33:05:e0:ec:e1:
31:be:99:3a:ed:f9:db:62:7c:0e:d4:19:fa:ec:b1:55:37:db:
54:dc:a8:22:bd:e1:60:75:fd:ed:86:31:34:6f:a3:ba:7c:ff:
32:eb:04:65:c9:b6:71:45:0b:e9:4f:00:fa:d4:21:84:80:c9:
74:e2:83:90:08:52:0b:c4:9a:77:a6:7c:bf:f9:d1:b1:9a:f6:
07:16:8b:f2:48:09:8d:88:4f:48:13:02:ec:4d:cd:93:94:47:
aa:e3:73:e9:4d:d1:48:1b:71:32:88:d4:d2:95:c7:73:8e:6f:
b9:a0:fb:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYjmZ2+fiulFE+dx6TPdf89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh
YTExMGIwHhcNMjUwNDExMDY0NjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzk4YjI0YzAxMjliZmRkYzdiMzFhZDM5OWU5Yjg4NGI3NThkZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJ259UmoTu2xAuqTT4qMsBdwYDl
+yCHddpdf4EAu4GkREo0AAx3Nkq7JjpAXT/FTTirhKdtUOTO/OVk60qyCjoU20FN
lOxUNIfJpqg45LtFuIR/lFPwfWrG0Z6zxjwJIym06z4LvJovAPo8Gul+3YlS+6UG
Glme7a4OvJ7nwOrC8GR2mpORWQ8fbjB6jNNHjM19zf7pTlgzZbIZvOk7dHCSZD9v
ikbWwTpw/loPPncgLezdSJrNzzJUp7EYS3B1Ik236q9/xCnC/K+WMq0BhP1LuA+X
9Cai0JM5vqiGluUul0RIZlZQuBxn/dnoXnuEOUncSq/65aJ2nSUD2mN5JwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDeYskwBKb/dx7Ma05npuIS3WN8MMB8GA1UdIwQY
MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt
NjI0ZjgzNjgyMTY5LzEvTjVpeVRBRXB2OTNIc3hyVG1lbTRoTGRZM3d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5
LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuSYaAwQA
wh+nMA0GCSqGSIb3DQEBCwUAA4IBAQAZLz11Zrf9T6yl361Qw+z93AYVLTsn+Pqw
TJIYt6F6iQUwbKDNf8yjHBRkk5IWa2zUVCTFn5seH5qLhROluzMgSH6fpPeS49n/
4NLY76A/lPhNx6fKOKIO/V2YcWpoYpeWuheu5GOJLePB1MOLC2pyHZ9mpVg04ssT
JxDObNBMV5t9EF9IiNz/ZEFeMwXg7OExvpk67fnbYnwO1Bn67LFVN9tU3KgiveFg
df3thjE0b6O6fP8y6wRlybZxRQvpTwD61CGEgMl04oOQCFILxJp3pny/+dGxmvYH
FovySAmNiE9IEwLsTc2TlEeq43PpTdFIG3EyiNTSlcdzjm+5oPti
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:54:46 2025 by rpki-client